From ec958cf5897507dc782876ff2815bebf54d023aa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 1 Aug 2020 03:45:30 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MARKED-584281 --- package.json | 2 +- yarn.lock | 7 ++++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index c760b9c..b9c83d7 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,7 @@ "html-to-text": "^1.5.1", "html2commonmark": "^0.6.1", "inquirer": "^0.11.2", - "marked": "^0.3.6", + "marked": "^1.1.1", "marked-terminal": "^2.0.0", "open": "0.0.5", "path": "^0.12.7", diff --git a/yarn.lock b/yarn.lock index 8016a61..be89fd1 100644 --- a/yarn.lock +++ b/yarn.lock @@ -538,9 +538,10 @@ marked-terminal@^2.0.0: lodash.assign "^4.2.0" node-emoji "^1.4.1" -marked@^0.3.6: - version "0.3.6" - resolved "https://registry.yarnpkg.com/marked/-/marked-0.3.6.tgz#b2c6c618fccece4ef86c4fc6cb8a7cbf5aeda8d7" +marked@^1.1.1: + version "1.1.1" + resolved "https://registry.yarnpkg.com/marked/-/marked-1.1.1.tgz#e5d61b69842210d5df57b05856e0c91572703e6a" + integrity sha512-mJzT8D2yPxoPh7h0UXkB+dBj4FykPJ2OIfxAWeIHrvoHDkFxukV/29QxoFQoPM6RLEwhIFdJpmKBlqVM3s2ZIw== "mdurl@~ 1.0.1": version "1.0.1"